From a7d30e013747f6836b80c82c6c9917617e2954d8 Mon Sep 17 00:00:00 2001
From: johnabass <johnbass1017@yahoo.com>
Date: Thu, 21 Nov 2024 12:00:30 -0800
Subject: [PATCH] add clientCertificates section to sample configuration

---
 themis.yaml | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/themis.yaml b/themis.yaml
index e9a540e..5669af4 100644
--- a/themis.yaml
+++ b/themis.yaml
@@ -60,6 +60,18 @@ token:
   nonce: true
   notBeforeDelta: -15s
   duration: 24h
+  clientCertificates:
+    # rootCAFile: "/path/to/bundle.pem"
+    # intermediatesFile: "/path/to/bundle.pem"
+    trust:
+      # these trust values are just to illustrate what you can do
+      # they are unique, so locally you can easily tell which case happened
+      noCertificates: 10
+      expiredUntrusted: 100
+      expiredTrusted: 200
+      untrusted: 900
+      trusted: 1000
+
   claims:
     - key: mac
       header: X-Midt-Mac-Address